Python Specialist for Web Scrapping & Security
Budget: $30 – $250 USD
WebScanner.py:
logo with display menu:
select option:
1.Find Subdomains
2.Find Directories
3.Find sensitive parameters
4. SQL Testing
5. xss Testing
1- subdomain.py:
https://github.com/aboul3la/Sublist3r/blob/master/sublist3r.py (use this open source code)
Options:
-d, --domain: Specify the target domain.
-b, --bruteforce: Enable subdomain bruteforcing.
-o, --output: Specify the output file path.
-h, --help: Display help information.
example
subdomain -d https://example.com -o /home/Desktop/ouput.txt
This option leverages various search engines like Google, Bing, Yahoo, DNSDumpster, VirusTotal, SSL, etc., to discover subdomains associated with the target domain.
2- find Directories:
https://github.com/marcolivierbouch/dirbpy
(use this open source code)
Options:
-u, --url: Specify the target URL.
-o, --output: Specify the output file path.
-L, --WordList: Specify the directory wordlist.
-h, --help: Display help information.
example:
FindDriectories -u https://example.com -o /home/Desktop/output
3-find parameters:
https://github.com/s0md3v/Arjun
(use this open source code)
Options:
-u, --url: Specify the target URL.
-o, --Output: Specify the output file path.
-L, --wordList: Specify the parameter wordlist.
-h, --help: Display help information.
example:
FindParameters -u https://example.com -o /home/Desktop/output.txt
4- testing xss:
https://github.com/Emoe/kxss
(use this open source code)
Options:
-u, --url: Specify the target URL.
-o, --output: Specify the output file path.
-L, --WordList: Specify the XSS payloads wordlist.
-h, --help: Display help information.
example:
xss -L /Desktop/wordlist.txt -o /Desktop/output.txt
This tool checks parameters regardless of whether they are filtered or unfiltered.
5- Testing SQL:
This tool automatically injects payloads into every input field on the selected website. For instance, if I select https://example.com, the tool systematically scans all inputs on the website, injecting payloads to determine if SQL injection vulnerabilities exist.
only these options I need:
-u --url
Options:
-u, --url: Specify the target URL.
-o, --output: Specify the output file path.
-L, --list: Specify the URL list.
-h, --help: Display help information.
example:
SqlInjection -L /Desktop/urlList.txt -u https://example.com -o /Desktop/output.txt
logo with display menu:
select option:
1.Find Subdomains
2.Find Directories
3.Find sensitive parameters
4. SQL Testing
5. xss Testing
1- subdomain.py:
https://github.com/aboul3la/Sublist3r/blob/master/sublist3r.py (use this open source code)
Options:
-d, --domain: Specify the target domain.
-b, --bruteforce: Enable subdomain bruteforcing.
-o, --output: Specify the output file path.
-h, --help: Display help information.
example
subdomain -d https://example.com -o /home/Desktop/ouput.txt
This option leverages various search engines like Google, Bing, Yahoo, DNSDumpster, VirusTotal, SSL, etc., to discover subdomains associated with the target domain.
2- find Directories:
https://github.com/marcolivierbouch/dirbpy
(use this open source code)
Options:
-u, --url: Specify the target URL.
-o, --output: Specify the output file path.
-L, --WordList: Specify the directory wordlist.
-h, --help: Display help information.
example:
FindDriectories -u https://example.com -o /home/Desktop/output
3-find parameters:
https://github.com/s0md3v/Arjun
(use this open source code)
Options:
-u, --url: Specify the target URL.
-o, --Output: Specify the output file path.
-L, --wordList: Specify the parameter wordlist.
-h, --help: Display help information.
example:
FindParameters -u https://example.com -o /home/Desktop/output.txt
4- testing xss:
https://github.com/Emoe/kxss
(use this open source code)
Options:
-u, --url: Specify the target URL.
-o, --output: Specify the output file path.
-L, --WordList: Specify the XSS payloads wordlist.
-h, --help: Display help information.
example:
xss -L /Desktop/wordlist.txt -o /Desktop/output.txt
This tool checks parameters regardless of whether they are filtered or unfiltered.
5- Testing SQL:
This tool automatically injects payloads into every input field on the selected website. For instance, if I select https://example.com, the tool systematically scans all inputs on the website, injecting payloads to determine if SQL injection vulnerabilities exist.
only these options I need:
-u --url
Options:
-u, --url: Specify the target URL.
-o, --output: Specify the output file path.
-L, --list: Specify the URL list.
-h, --help: Display help information.
example:
SqlInjection -L /Desktop/urlList.txt -u https://example.com -o /Desktop/output.txt